CVE-2018-3937

N/A

Descripcion

An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado8/14/2018

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

sony:snc-eb600sony:snc-eb600_firmwaresony:snc-eb600bsony:snc-eb600b_firmwaresony:snc-eb602rsony:snc-eb602r_firmwaresony:snc-eb630sony:snc-eb630_firmwaresony:snc-eb630bsony:snc-eb630b_firmwaresony:snc-eb632rsony:snc-eb632r_firmwaresony:snc-em600sony:snc-em600_firmwaresony:snc-em601sony:snc-em601_firmwaresony:snc-em602rsony:snc-em602r_firmwaresony:snc-em602rcsony:snc-em602rc_firmwaresony:snc-em630sony:snc-em630_firmwaresony:snc-em631sony:snc-em631_firmwaresony:snc-em632rsony:snc-em632r_firmwaresony:snc-em632rcsony:snc-em632rc_firmware

Debilidades (CWE)

CWE-78

Referencias

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604(talos-cna@cisco.com)

https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.